AWS Certified Solutions Architect - Associate SAA-C03 — Topic 1 Question 484

Question

A company wants to move from many standalone AWS accounts to a consolidated, multi-account architecture. The company plans to create many new AWS accounts for different business units. The company needs to authenticate access to these AWS accounts by using a centralized corporate directory service. Which combination of actions should a solutions architect recommend to meet these requirements? (Choose two.)

Accepted Answer

Correct answer: A, E. The correct answer is A, E. Option A: Create a new organization in AWS Organizations with all features turned on. Create the new AWS accounts in the organization. Option E: Set up AWS IAM Identity Center (AWS Single Sign-On) in the organization. Configure IAM Identity Center, and integrate it with the company's corporate directory service. AWS IAM controls authenticated and authorized access to AWS resources with fine-grained policies. AWS Organizations centrally governs and secures multiple AWS accounts. AWS IAM Identity Center (SSO) centrally manages workforce access to multiple accounts and apps.

AWS Certified Solutions Architect - Associate SAA-C03 — Question 484